$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e47ffbf9-7c48-3f37-845c-7915be3ae776.roa File: e47ffbf9-7c48-3f37-845c-7915be3ae776.roa (raw, json) Hash identifier: vSQHu/40tpaobmPaV2jlH67b+SbRYKc6je9uvhJ3SYg= Subject key identifier: 0C:48:B3:FC:F8:2D:F0:22:39:97:12:14:9C:00:1B:B8:20:47:6C:7C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E776C07BBB445A9E6756F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e47ffbf9-7c48-3f37-845c-7915be3ae776.roa Signing time: Thu 19 Jun 2025 14:41:30 +0000 ROA not before: Thu 19 Jun 2025 14:41:30 +0000 ROA not after: Wed 17 Sep 2025 14:41:30 +0000 asID: 22773 IP address blocks: 72.217.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:77:6c:07:bb:b4:45:a9:e6:75:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:41:30 2025 GMT Not After : Sep 17 14:41:30 2025 GMT Subject: CN=ce1cb09b-2e76-42a6-b8b2-f2e34ba1320e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:17:ad:f3:df:8c:7b:4d:1a:62:cb:8c:bd: b2:43:dc:e2:a5:82:27:60:94:d7:e3:5d:99:85:cd: 8f:82:4b:b0:eb:b1:ea:2e:40:2e:ba:ef:cb:e5:db: ff:ac:4b:46:46:a4:09:ab:12:b2:7e:a0:18:cb:db: a2:a6:0a:59:7b:74:33:df:73:b6:4a:71:cf:83:1c: 1a:18:42:f5:0d:f4:83:f1:70:23:f0:aa:7b:b5:64: 6a:b8:e7:18:9a:70:40:0a:45:49:6c:5a:d6:a7:af: b5:55:55:dc:c3:b6:fb:f4:05:45:d1:16:40:16:5f: 81:d8:aa:9e:e6:1a:9f:69:c5:61:b1:75:4d:a2:af: c3:15:73:bc:4d:7d:1b:76:41:b2:9a:3b:92:b1:62: 6d:fe:36:58:77:47:56:50:4b:c5:aa:ad:57:f0:54: 72:63:75:4a:38:cb:b3:84:d3:1a:f7:18:66:27:cd: 71:b9:36:e4:28:32:cc:96:a7:c8:fc:9a:87:45:b7: 55:fd:4d:79:34:c8:2b:3d:63:db:fa:04:10:f1:f1: a9:d0:ab:99:16:96:ba:c6:2d:b6:e3:27:b7:07:d2: a3:6f:f1:b4:c0:94:d3:2f:34:9e:63:a6:53:95:87: be:49:bc:51:22:d3:f8:17:24:3b:41:2f:c3:b9:76: 51:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:48:B3:FC:F8:2D:F0:22:39:97:12:14:9C:00:1B:B8:20:47:6C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e47ffbf9-7c48-3f37-845c-7915be3ae776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:f6:5d:b4:53:69:d6:a6:93:92:65:0b:af:31:cb:53:64:13: f9:1e:e2:73:fb:38:98:c6:c0:ce:b9:66:b1:58:68:d2:a9:64: 37:8f:a0:b7:d4:75:89:67:06:a6:73:f2:2f:a5:e2:2d:fc:c4: ff:74:c2:79:e2:5f:88:2a:38:f8:2b:18:25:87:dd:fa:02:92: ed:e9:e1:ac:83:c5:a3:8a:e7:9c:a0:fb:63:56:9d:ee:88:15: 20:b0:ba:e0:30:5a:8d:42:ed:68:ba:89:d8:75:02:96:45:ec: 69:8f:56:82:89:aa:c0:4a:50:de:b4:32:47:9e:f7:70:b5:cb: e9:c7:dc:2e:3c:67:1e:92:08:60:85:dd:de:65:dc:b1:f7:e3: 43:5e:cd:ae:cd:10:f8:1d:f9:da:13:e2:80:e8:87:53:e0:55: 00:47:7a:ce:40:17:df:46:f3:48:2a:94:07:ca:7b:f9:83:67: 9b:62:68:52:16:b8:7c:ea:62:2e:33:55:dd:c6:d3:fb:d0:0e: 9b:81:bb:83:72:e3:56:cb:a3:cc:a2:ca:02:6a:4e:68:b1:f3: 05:c1:03:31:c7:2f:67:56:80:5c:e7:97:cf:6a:4b:75:f7:d7: 12:66:cd:1a:33:d8:5d:4b:c2:86:c4:a6:d9:a3:11:3a:39:b2: 02:0f:62:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d2wHu7RFqeZ1bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0NDEzMFoXDTI1MDkxNzE0NDEzMFowLzEtMCsGA1UEAxMk Y2UxY2IwOWItMmU3Ni00MmE2LWI4YjItZjJlMzRiYTEzMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQUXrfPfjHtNGmLLjL2yQ9zipYInYJTX412Z hc2Pgkuw67HqLkAuuu/L5dv/rEtGRqQJqxKyfqAYy9uipgpZe3Qz33O2SnHPgxwa GEL1DfSD8XAj8Kp7tWRquOcYmnBACkVJbFrWp6+1VVXcw7b79AVF0RZAFl+B2Kqe 5hqfacVhsXVNoq/DFXO8TX0bdkGymjuSsWJt/jZYd0dWUEvFqq1X8FRyY3VKOMuz hNMa9xhmJ81xuTbkKDLMlqfI/JqHRbdV/U15NMgrPWPb+gQQ8fGp0KuZFpa6xi22 4ye3B9Kjb/G0wJTTLzSeY6ZTlYe+SbxRItP4FyQ7QS/DuXZRDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxIs/z4LfAiOZcSFJwAG7ggR2x8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTQ3ZmZiZjktN2M0OC0z ZjM3LTg0NWMtNzkxNWJlM2FlNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNl5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKX2XbRTadamk5JlC68xy1NkE/ke4nP7OJjGwM65ZrFYaNKpZDePoLfU dYlnBqZz8i+l4i38xP90wnniX4gqOPgrGCWH3foCku3p4ayDxaOK55yg+2NWne6I FSCwuuAwWo1C7Wi6idh1ApZF7GmPVoKJqsBKUN60Mkee93C1y+nH3C48Zx6SCGCF 3d5l3LH340Neza7NEPgd+doT4oDoh1PgVQBHes5AF99G80gqlAfKe/mDZ5tiaFIW uHzqYi4zVd3G0/vQDpuBu4Ny41bLo8yiygJqTmix8wXBAzHHL2dWgFznl89qS3X3 1xJmzRoz2F1LwobEptmjETo5sgIPYrY= -----END CERTIFICATE-----Generated at Tue Jul 1 17:58:50 2025 by rpki-client